Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bddfea7c-f1a1-4155-a920-d1217ee6a925/b8679aafbe236b2edbab1a1692d5283cf3ae2621.roa
File:                     b8679aafbe236b2edbab1a1692d5283cf3ae2621.roa (raw, json)
Hash identifier:          mS9SJT3Sp44NvSNQDk26n8na99XqrAWHEqjpQlgCXMo=
Subject key identifier:   B2:23:04:B6:D9:E1:50:B1:0C:05:3B:9B:21:60:BB:EA:D5:39:39:48
Certificate issuer:       /CN=49d54da8d27034bcd22d917632e38d68bbeae195
Certificate serial:       0EC631
Authority key identifier: 2D:9A:E3:CA:72:15:42:01:DF:53:FA:27:34:BE:26:91:CF:4E:98:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49d54da8d27034bcd22d917632e38d68bbeae195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bddfea7c-f1a1-4155-a920-d1217ee6a925/b8679aafbe236b2edbab1a1692d5283cf3ae2621.roa
Signing time:             Fri 24 Nov 2023 11:31:19 +0000
ROA not before:           Fri 24 Nov 2023 11:31:18 +0000
ROA not after:            Mon 24 Nov 2025 11:31:18 +0000
asID:                     272082
IP address blocks:        2803:9b10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 968241 (0xec631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d54da8d27034bcd22d917632e38d68bbeae195
        Validity
            Not Before: Nov 24 11:31:18 2023 GMT
            Not After : Nov 24 11:31:18 2025 GMT
        Subject: CN=b8679aafbe236b2edbab1a1692d5283cf3ae2621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:87:55:1d:5d:a3:c5:f8:89:9f:da:05:17:39:
                    f3:8b:ee:fd:c6:68:f6:92:42:6c:b8:a2:ef:ac:f7:
                    80:2f:a0:4f:e8:47:05:bb:8a:c1:09:00:2d:f5:6b:
                    09:52:3f:7c:70:db:89:85:ed:66:fd:f1:34:9a:54:
                    82:f9:0c:ce:13:fa:33:02:c3:6e:0c:36:82:a6:4b:
                    4b:1f:bc:0b:72:2c:61:4c:87:f4:65:2b:e0:7a:4b:
                    e0:03:6e:a5:dc:7e:01:52:cb:f1:67:23:63:c9:1e:
                    68:ec:b2:d9:9a:49:b7:c1:b1:0a:96:80:b8:45:a9:
                    f1:94:f4:6f:3d:e2:42:cc:50:a1:2f:07:61:f1:39:
                    03:5a:19:a0:b1:45:e8:2c:79:54:9a:4c:54:29:c3:
                    58:62:1c:df:01:e6:a8:a2:69:8a:1c:08:67:fc:19:
                    b2:e8:a0:5a:46:96:57:ab:40:60:7f:f8:b4:55:53:
                    0c:8b:53:f1:4f:01:85:ad:ad:8e:4f:04:b0:b6:17:
                    63:f8:76:2a:c1:1f:20:ee:ea:6e:64:51:85:86:83:
                    c6:1e:0b:15:0c:fb:c1:8b:2f:40:6b:31:0e:53:c4:
                    61:de:07:f9:2b:30:54:d9:8b:5e:a8:4a:9d:b7:c2:
                    85:28:be:50:48:17:ed:82:16:b8:db:85:92:da:cc:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:23:04:B6:D9:E1:50:B1:0C:05:3B:9B:21:60:BB:EA:D5:39:39:48
            X509v3 Authority Key Identifier:
                keyid:2D:9A:E3:CA:72:15:42:01:DF:53:FA:27:34:BE:26:91:CF:4E:98:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49d54da8d27034bcd22d917632e38d68bbeae195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bddfea7c-f1a1-4155-a920-d1217ee6a925/b8679aafbe236b2edbab1a1692d5283cf3ae2621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bddfea7c-f1a1-4155-a920-d1217ee6a925/49d54da8d27034bcd22d917632e38d68bbeae195.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:09:bc:e1:02:b9:7e:60:6c:ef:75:7d:5c:82:d8:d4:6a:00:
         59:bf:7b:3a:13:e4:08:44:40:94:18:b3:2a:26:2d:39:c6:11:
         29:87:27:b6:80:92:15:35:3e:68:c2:d4:be:e7:a0:e8:cf:5a:
         a9:5c:11:ab:7f:a3:f4:79:6f:35:d0:ef:b7:c2:a1:6d:52:3f:
         59:33:08:3a:2e:00:9e:b9:85:18:fc:e1:e8:cd:3a:b1:95:80:
         74:c0:d5:57:b6:6c:6f:c8:fc:47:8c:63:bc:5c:c3:64:11:7a:
         f7:f5:6e:95:bf:40:b2:f9:55:94:1e:23:79:87:ec:2f:16:67:
         ee:41:33:36:09:cd:03:6b:f4:45:82:78:c9:ee:87:ec:7c:97:
         cc:75:c2:d6:c0:72:4f:d1:d3:82:d9:54:bf:17:7d:fd:2f:b7:
         cd:ce:86:4b:f2:9a:78:e1:1c:9e:22:62:fb:40:ae:4a:fb:ee:
         2f:ce:93:c4:c9:34:d6:18:f8:3e:b0:4f:e4:9f:a2:77:46:c8:
         83:9c:0b:2a:a4:aa:b9:96:d0:89:ed:43:f2:53:b0:84:b5:ea:
         51:3c:7a:1e:4b:01:a6:44:34:25:ea:22:32:8f:5a:3f:7c:a2:
         c4:82:5d:97:68:4d:d8:25:a3:b6:fb:bd:ce:41:1f:65:2f:fa:
         6a:37:10:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----